PT-2025-5793 · Logsign · Logsign Unified Secops Platform

Abdessamad Lahlali

+1

·

Published

2025-02-05

·

Updated

2025-02-18

·

CVE-2025-1044

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Logsign Unified SecOps Platform versions prior to 6.4.32
Description: This issue allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. The specific flaw exists within the web service, which listens on TCP port 443 by default. The issue results from the lack of proper implementation of the authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system.
Recommendations: Update to version 6.4.32 or later to stay secure. As a temporary workaround, consider restricting access to the web service that listens on TCP port 443 until a patch is applied.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-1044
ZDI-25-085

Affected Products

Logsign Unified Secops Platform